to get authorisations for tcode

Former Member — Wed, 22 Aug 2012 06:22:50 GMT

can we know authorisations for a tcode using any program??

Re: to get authorisations for tcode

Former Member — Wed, 22 Aug 2012 06:30:35 GMT

Upto my knowing i think we cant get authorisation by program.

Re: to get authorisations for tcode

pushkar_dhale — Wed, 22 Aug 2012 06:45:04 GMT

Hi,

Use this program.

********************************************************************

report zauth .

tables: tstc, tobjt, usobt, tactz, tobj, sscrfields.

* AUTH_FIELD_GET_INFO DDIF_FIELDINFO_GET AUTH_FIELDINFO_GET

data: begin of itab occurs 0.

include structure usobt.

data: end of itab.

data: begin of i_tc occurs 0,

tcode_l like tstc-tcode,

tcode_h like tstc-tcode,

end of i_tc.

data: begin of i_file occurs 0,

tcode_low like tstc-tcode,

tcode_high like tstc-tcode,

end of i_file.

data: fld_txt like dfies-fieldtext.

data: aa type i, bb type i, cc type i, dd type i, ee type i, ff type i.

data: begin of values occurs 0.

include structure tpr01.

data: end of values.

data new_line.

data upload.

data obj_change.

data fld_change.

data fld(20).

data val(20).

data ln_o like sy-lilli.

data ln_f like sy-lilli.

data field like itab-field.

data object like itab-object.

ranges: i_tcode for tstc-tcode. " OPTION EQ SIGN I.

select-options: tcode for tstc-tcode memory id tcd.

selection-screen function key 1.

selection-screen function key 2.

*SELECTION-SCREEN FUNCTION KEY 4.

initialization.

move 'Create File' to sscrfields-functxt_01.

move 'Upload Transaction Codes' to sscrfields-functxt_02.

at selection-screen.

case sy-ucomm.

when 'FC01'.

loop at tcode.

i_file-tcode_high = tcode-high.

i_file-tcode_low = tcode-low.

append i_file.

endloop.

if sy-subrc <> 0.

message i000(8i) with 'Empty File will be created!'.

endif.

call function 'DOWNLOAD'

exporting

filename = 'C:\Windows\Desktop\TCODE.txt '

filetype = 'DAT'

tables

data_tab = i_file

if sy-subrc <> 0.

* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO

* WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.

endif.

when 'FC02'.

refresh i_tc. clear i_tc. refresh tcode. clear tcode.

upload = 'X'.

call function 'UPLOAD'

exporting

filename = 'C:\Windows\Desktop\Tcode.txt'

filetype = 'DAT'

tables

data_tab = i_tc

if sy-subrc <> 0.

* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO

* WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.

else.

refresh i_tcode. clear i_tcode.

loop at i_tc.

if i_tc-tcode_h is initial.

if i_tc-tcode_l ca '*'.endif.

if sy-fdpos <> 20.

i_tcode-sign = 'I'.

i_tcode-option = 'CP'.

i_tcode-low = i_tc-tcode_l.

i_tcode-high = i_tc-tcode_h.

else.

i_tcode-sign = 'I'.

i_tcode-option = 'EQ'.

i_tcode-low = i_tc-tcode_l.

i_tcode-high = i_tc-tcode_h.

endif.

else.

i_tcode-sign = 'I'.

i_tcode-option = 'BT'.

i_tcode-low = i_tc-tcode_l.

i_tcode-high = i_tc-tcode_h.

endif.

append i_tcode.

endloop.

tcode[] = i_tcode[].

endif.

endcase.

read table tcode.

if sy-subrc <> 0.

message e000(8i) with 'Please enter a Transaction Code'.

endif.

start-of-selection.

aa = 18.

bb = aa + 15.

cc = bb + 50.

dd = cc + 10.

ee = dd + 30.

ff = ee + 20.

select * from usobt into table itab where name in tcode.

loop at itab.

select single * from tobjt where object = itab-object

and langu = sy-langu.

clear new_line.

clear obj_change.

clear fld_change.

format color off.

on change of itab-name.

new_line = 'Y'.

format color 4.

write:/2 itab-name(30).

hide: itab-name.

endon.

if new_line <> 'Y'.

new-line.

endif.

on change of itab-object.

obj_change = 'X'.

write: at aa itab-object.

hide: itab-object.

endon.

if new_line = 'Y' and obj_change <> 'X'.

write: at aa itab-object.

hide: itab-object.

endif.

on change of tobjt-ttext.

write: at bb tobjt-ttext.

endon.

if new_line = 'Y' and obj_change <> 'X'.

write: at bb tobjt-ttext.

hide: tobjt-ttext.

endif.

on change of itab-field.

fld_change = 'X'.

write: at cc itab-field color 6 inverse on hotspot.

hide: itab-field .

call function 'AUTH_FIELD_GET_INFO'

exporting

fieldname = itab-field

importing

text = fld_txt

write: at dd fld_txt.

endon.

if new_line = 'Y' and fld_change <> 'X'.

write: at cc itab-field color 6 inverse on hotspot.

write: at dd fld_txt.

endif.

write: at ee itab-low.

write: at ff itab-high.

endloop.

end-of-selection.

clear itab.

at line-selection.

clear object. clear field.

ln_o = sy-lilli.

ln_f = sy-lilli.

field = itab-field.

get cursor field fld value val.

if itab-object is initial.

do.

ln_o = ln_o - 1.

read line ln_o.

if sy-subrc <> 0.

exit.

endif.

if not itab-object is initial.

exit.

endif.

enddo.

object = itab-object.

else.

object = itab-object.

endif.

if field is initial.

do.

ln_f = ln_f - 1.

read line ln_f.

if sy-subrc <> 0.

exit.

endif.

if not itab-field is initial.

exit.

endif.

enddo.

field = itab-field.

endif.

call function 'SUPRN_MAINTAIN_VALUES'

exporting

object = object

field = field

tables

f_values = values

*******************************************************************

Regards,

Puskhar Dhale

Re: to get authorisations for tcode

Former Member — Wed, 22 Aug 2012 06:45:06 GMT

Hi,

Take a look at transaction SU24 to determine what authorisation objects are checked by any transaction.

Regards,

Nick

Re: to get authorisations for tcode

Former Member — Wed, 22 Aug 2012 06:57:17 GMT

Thanks All for ur replies.

Re: to get authorisations for tcode

SuhaSaha — Wed, 22 Aug 2012 06:58:52 GMT

Hello Nick,

Take a look at transaction SU24 to determine what authorisation objects are checked by any transaction.

That is a good proposition, in fact. Tbh i generally use ST01 to trace the auth. checks which occur at runtime when calling a transaction.

If i am not wrong SU24 is not a mandatory activity. But it does help when creating Auth. profiles, hence a good-to-have. I say this from my previous project experience where previously we did not maintain SU24 customization for any (custom) transaction. But later we were advised to fill the SU24 settings as it helped the Security team in setting up Auth. profiles.

May be this is not the case for Std. SAP Tcodes.

BR,

Suhas

Re: to get authorisations for tcode

Former Member — Wed, 22 Aug 2012 07:04:09 GMT

Hi Suhas,

I completely agree. While i think it's good practice to maintain SU24 for custom transactions it can't relied on, and only a trace will give you the definitive view.

As for how well SU24 is populated for SAP Tcodes, I couldn't possibly comment.......

Regards,

Nick

Re: to get authorisations for tcode

former_member223981 — Wed, 22 Aug 2012 14:37:13 GMT

I find the best way is to set a break-point at statement AUTHORITY-CHECK. And then execute your steps. The breakpoint will be hit when an authority check is reached. This allows you to see the exact point of the process where the user's authorisation is being checked. The authorisation object being checked is specified in the code.

topic Re: to get authorisations for tcode in Application Development and Automation Discussions

to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode

Re: to get authorisations for tcode